[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sun Oct 11 08:46:48 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
1f9d05f0 by Salvatore Bonaccorso at 2026-10-11T09:45:30+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
CVE-2026-97853 (Memory Allocation with Excessive Size Value vulnerability in ericmj de ...)
- TODO: check
+ NOT-FOR-US: decimal Elixir library
CVE-2026-97183 (The WP-Invoice WordPress plugin through 4.3.1 does not perform capabi ...)
NOT-FOR-US: WordPress plugin
CVE-2026-96227 (The Piotnet Forms WordPress plugin through 1.0.30 does not authenticat ...)
@@ -335,213 +335,213 @@ CVE-2026-14854 (The WooCommerce Bookings WordPress plugin before 3.11.0 does not
CVE-2026-12980 (The Post Snippets WordPress plugin through 4.2.4 does not properly es ...)
NOT-FOR-US: WordPress plugin
CVE-2026-108708 (Wukong_HRM through commit 186115e contains a missing authorization vul ...)
- TODO: check
+ NOT-FOR-US: Wukong_HRM
CVE-2026-108707 (Wukong_HRM through commit 186115e contains an authentication bypass vu ...)
- TODO: check
+ NOT-FOR-US: Wukong_HRM
CVE-2026-108706 (eladmin through commit 55fbf70 contains a missing authorization vulner ...)
- TODO: check
+ NOT-FOR-US: eladmin
CVE-2026-108705 (CordysCRM through 1.9.3 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: CordysCRM
CVE-2026-108704 (CordysCRM through 1.9.3 contains an authorization bypass vulnerability ...)
- TODO: check
+ NOT-FOR-US: CordysCRM
CVE-2026-108703 (CordysCRM through 1.9.3 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: CordysCRM
CVE-2026-108702 (1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission ...)
- TODO: check
+ NOT-FOR-US: CordysCRM
CVE-2026-108701 (1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vul ...)
- TODO: check
+ NOT-FOR-US: CordysCRM
CVE-2026-108700 (1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vul ...)
- TODO: check
+ NOT-FOR-US: CordysCRM
CVE-2026-108696 (CoreShop through 1.5.5 contains an authorization bypass vulnerability ...)
- TODO: check
+ NOT-FOR-US: CoreShop
CVE-2026-108695 (MultiVendorX WordPress plugin through 5.0.19 contains an incorrect aut ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-108694 (ConvertX through 0.19.0 contains an arbitrary file read vulnerability ...)
- TODO: check
+ NOT-FOR-US: ConvertX
CVE-2026-108693 (ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an unco ...)
TODO: check
CVE-2026-108692 (1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing author ...)
- TODO: check
+ NOT-FOR-US: CordysCRM
CVE-2026-108691 (mall4j through 4.0 contains an improper authorization vulnerability th ...)
- TODO: check
+ NOT-FOR-US: mall4j
CVE-2026-108690 (mall4j through 4.0 contains an information disclosure vulnerability th ...)
- TODO: check
+ NOT-FOR-US: mall4j
CVE-2026-108689 (Wukong AICRM through 20260610 contains a missing authorization vulnera ...)
- TODO: check
+ NOT-FOR-US: Wukong AICRM
CVE-2026-108688 (Eladmin through 2.7 contains a missing authorization vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Eladmin
CVE-2026-108680 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108679 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108678 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108677 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108676 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108675 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108674 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108673 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108672 (JeecgBoot through 3.9.5 contains an authorization bypass vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108671 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108670 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108669 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108668 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108667 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108666 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108665 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108664 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108663 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108662 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108661 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108660 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108659 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108658 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108657 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108656 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108655 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108654 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108653 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108652 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108651 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108650 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108649 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108648 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108647 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108646 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108645 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108644 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108643 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108642 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108641 (JeecgBoot through 3.9.5 contains an insecure direct object reference v ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108640 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108639 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108638 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108637 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108636 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108635 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108634 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108633 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108632 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108631 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108630 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108629 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108628 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108627 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108626 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108625 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108624 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108623 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108622 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108621 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108620 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108619 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108618 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108617 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108616 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108615 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108614 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108613 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108612 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108611 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108610 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108609 (JeecgBoot through 3.9.5 contains an insecure direct object reference v ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108608 (JeecgBoot through 3.9.5 contains an insecure direct object reference v ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108607 (JeecgBoot through 3.9.5 contains an insecure direct object reference v ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108606 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108605 (JeecgBoot through 3.9.5 contains a missing authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: JeecgBoot
CVE-2026-108604 (Tabularis through 0.27.0 contains an incorrect authorization vulnerabi ...)
- TODO: check
+ NOT-FOR-US: Tabularis
CVE-2026-108603 (slide-maker through 5.8.0 contains a path traversal vulnerability in g ...)
- TODO: check
+ NOT-FOR-US: slide-maker
CVE-2026-108602 (Helicone through v2025.08.21-1 contains a server-side request forgery ...)
- TODO: check
+ NOT-FOR-US: Helicone
CVE-2026-108541 (A vulnerability has been found in highwarden Super Store Finder up to ...)
- TODO: check
+ NOT-FOR-US: highwarden Super Store Finder
CVE-2026-108540 (A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts ...)
- TODO: check
+ NOT-FOR-US: OpenSpug Spug
CVE-2026-108539 (A vulnerability was detected in GPAC up to 26.07.0. This affects the f ...)
TODO: check
CVE-2026-108538 (A security vulnerability has been detected in GPAC up to 26.07.0. The ...)
TODO: check
CVE-2026-108523 (A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. T ...)
- TODO: check
+ NOT-FOR-US: Studio-Saelix Sencho
CVE-2026-108522 (A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This a ...)
- TODO: check
+ NOT-FOR-US: Studio-Saelix Sencho
CVE-2026-108521 (A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. A ...)
- TODO: check
+ NOT-FOR-US: Studio-Saelix Sencho
CVE-2026-107694 (The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution Wo ...)
NOT-FOR-US: WordPress plugin
CVE-2026-107507 (The Squadeno WordPress plugin before 1.12.0 does not enforce its rest ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1f9d05f0e548c85d97e4c120845db46e1cf1b1a1
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1f9d05f0e548c85d97e4c120845db46e1cf1b1a1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261011/d0a013ac/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list